IK kan wel de script posten... <?php /* ------------------------- */
include("_include-config.php");
if(isset($_POST['login'],$_POST['pass'])) {
$dbres = mysql_query("SELECT `login`,`activated` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `pass`=MD5('{$_POST['pass']}')");
if(($data = mysql_fetch_object($dbres)) && $data->activated == 1) {
$validate = md5(rand(0,1000));
setcookie("login",$data->login,time()+60*60*24,"/",".crimewar2004.com");
setcookie("validate",$validate,time()+60*60*24,"/",".crimewar2004.com");
mysql_query("REPLACE INTO `[online]`(`time`,`login`,`IP`,`validate`) values(NOW(),'{$_SERVER['REMOTE_ADDR']}','{$data->login}','$validate')");
$_SESSION['login'] = $data->login;
$_SESSION['IP'] = $_SERVER['REMOTE_ADDR'];
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
$_SESSION['data'] = mysql_fetch_object($dbres);
}
}
else if($_GET['x'] == "logout") {
mysql_query("DELETE FROM `[online]` WHERE `login`='{$_COOKIE['login']}' AND `validate`='{$_COOKIE['validate']}' AND `IP`='{$_SERVER['REMOTE_ADDR']}'");
setcookie("login",'',time()-24*60*60,"/","");
setcookie("validate",'',time()-24*60*60,"/","");
unset($_SESSION['login']);
unset($_SESSION['IP']);
unset($_SESSION['data']);
}
/* ------------------------- */ ?>
<html>
<head>
<title>Borduren Voor Gezondheid</title>
<link rel="stylesheet" type="text/css" href="<?php echo ($_COOKIE['v'] == 2) ? "css-v2.css" : "css-v1.css"; ?>">
<script language="JavaScript">
var left = 0;
function movein(){
if (document.layers) {
document.layers['message'].pageX = window.pageXOffset + left;
left+=step;
if(left<moveto){ setTimeout('movein()',speed); }
else { setTimeout('closemessage()',hide); }
}
else{
document.getElementById('message').style.left=left+'px';
left+=step;
if(left<moveto){ setTimeout('movein()',speed); }
else { setTimeout('closemessage()',hide); }
}
}
function closemessage(){
if (document.layers) {document.layers['message'].visibility='hidden';}
else{document.getElementById('message').style.visibility='hidden';}
}
</script>
<style type="text/css" media="screen">
#obmessage #message {top:120px; border:1px solid black;
width:200px;background-color:lime;padding:4px;
position:absolute;}
</style>
</head>
<BODY onLoad="movein()">
<body style="background: #FFFFCC; margin: 0px;">
<table align="center" width=100%>
<?php /* ------------------------- */
if($_GET['x'] == "logout")
print " <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n <tr><td class=\"mainTxt\">Jammer dat je nu al gaat, maar je bent nu uitgelogd, tot de volgende keer op Borduren Voor Gezondheid\n <script language=\"javascript\">setTimeout('parent.window.location.reload()',500)</script></td></tr>\n";
else if($_GET['x'] == "lostpass") {
print " <tr><td class=\"subTitle\"><b>Wachtwoord vergeten</b></td></tr>\n";
if(isset($_GET['id'],$_GET['code'])) {
$dbres = mysql_query("SELECT `login` FROM `[temp]` WHERE `id`='{$_GET['id']}' AND `code`='{$_GET['code']}' AND `area`='lostpass'");
if($data = mysql_fetch_object($dbres)) {
$dbres = mysql_query("SELECT `login`,`email` FROM `[users]` WHERE `login`='{$data->login}'");
$data = mysql_fetch_object($dbres);
$newpass = rand(100000,999999);
mysql_query("UPDATE `[users]` SET `pass`=MD5('$newpass') WHERE `login`='{$data->login}'");
mysql_query("DELETE FROM `[temp]` WHERE `id`='{$_GET['id']}'");
mail($data->email,"Criminals password","Je wachtwoord is gereset, je kan nu inloggen met: $newpass","From: Borduren voor Gezondheid <
[email protected]>\n");
print " <tr><td class=\"mainTxt\">Je nieuwe wachtwoord is ge-emailed naar {$data->email}</td></tr>\n";
}
}
else if(isset($_POST['email'],$_POST['login'])) {
$dbres = mysql_query("SELECT `login`,`email` FROM `[users]` WHERE `login`='{$_POST['login']}' AND `email`='{$_POST['email']}'AND `activated`=1");
if($data = mysql_fetch_object($dbres)) {
$code = rand(100000,999999);
mysql_query("INSERT INTO `[temp]`(`login`,`code`,`area`,`time`) values('{$data->login}',$code,'lostpass',NOW())");
$id = mysql_insert_id();
mail($data->email,"Borduren Voor Gezondheid password","Er is een aanvraag binnengekomen om je wachtwoord te resetten. Als jij dit niet hebt aangevraagd, negeer deze email dan. Heb jij dit wel gedaan, klik dan op deze link:\nhttp://
www.bordurenvoorgezondheid.com/login.php?x=lostpass&id=$id&code=$code","From: Borduren Voor Gezondheid <
[email protected]@gmail.com>");
print " <tr><td class=\"mainTxt\">Er is een email gestuurd naar {$data->email} met verdere instructies</td></tr>\n";
}
else
print " <tr><td class=\"mainTxt\">Er is geen gebruiker met die login en e-mail</td></tr>\n";
}
print <<<ENDHTML
<tr><td class="mainTxt" align="center"><br>
<form method="post"><table>
<tr><td width=100>Login:</td> <td><input type="text" name="login"></td></tr>
<tr><td width=100>E-Mail:<td> <td><input type="text" name="email"></td></tr>
<tr><td></td> <td align="right"><input type="submit" value="Ok" style="width: 100"></td></tr>
</form></table></td></tr>
ENDHTML;
}
else if($data) {
if($data->activated == 0)
print " <tr><td class=\"mainTxt\">Er is een fout opgetreden bij de activatie, je account is niet gedelete, dus geen probleem. Als u een e-mail stuurt naar
[email protected]@gmail.com, word uw account zo snel mogelijk geactiveerd. Alvast bedankt voor de medewerking. Succes met Borduren voor Gezondheid </td></tr>\n";
else
print " <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n <tr><td class=\"mainTxt\">Welkom beste lid!...Je word nu ingelogd.\n <script language=\"javascript\">setTimeout('parent.window.location.reload()',500)</script>\n </td></tr>\n";
}
else {
print " <tr><td class=\"subTitle\"><b>Login</b></td></tr>\n";
if(isset($_POST['login'],$_POST['pass']))
print " <tr><td class=\"mainTxt\">U heeft een verkeerde login of wachtwoord ingevoerd</td></tr>\n";
print <<<ENDHTML
<tr><td class="mainTxt">
<form method="post"><table align="center">
<tr><td width=100>Login:</td> <td><input type="text" name="login" maxlength=16 style="width: 150;"></td></tr>
<tr><td width=100>Wachtwoord:</td> <td><input type="password" name="pass" maxlength=16 style="width: 150;"></td></tr>
<tr><td></td><td align="right"><input type="submit" name="submit" style="width: 100;" value="Login"></td></tr>
</table></form>
</td></tr>
<tr><td class="mainTxt" align="center"><a href="login.php?x=lostpass">Wachtwoord vergeten? Klik hier</a></td></tr>
ENDHTML;
}
/* ------------------------- */ ?>
</table>
</body>
</html>
<noscript><noscript>
<plaintext><plaintext>
Kan iemand melden wat hieraan fout is?